Описание
phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cookie and repeatedly re-authenticating to reset the counter, enabling unbounded TOTP code guessing.
Ссылки
- ExploitMitigationVendor Advisory
- Third Party Advisory
- ExploitMitigationVendor Advisory
Уязвимые конфигурации
EPSS
7.4 High
CVSS3
Дефекты
Связанные уязвимости
phpMyFAQ before 4.1.7 contains a brute-force vulnerability in the two-factor authentication step where the failure counter is session-scoped and reset on each successful password re-authentication. Attackers with a valid password can bypass the five-attempt limit by obtaining a fresh session cookie and repeatedly re-authenticating to reset the counter, enabling unbounded TOTP code guessing.
Уязвимость файла src/phpMyFAQ/Controller/Frontend/AuthenticationController.php веб-приложения phpMyFAQ, позволяющая нарушителю оказать воздействие на конфиденциальность и целостность защищаемой информации
EPSS
7.4 High
CVSS3